-
cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu2.4) bionic-security; urgency=medium
* SECURITY UPDATE: SQL injection in SQL plugin
- debian/patches/CVE-2022-24407.patch: escape password for SQL
insert/update commands in plugins/sql.c.
- CVE-2022-24407
-- Marc Deslauriers <email address hidden> Tue, 15 Feb 2022 15:04:08 -0500
-
cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu2.3) bionic; urgency=medium
* d/p/lp-1906627-01-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch:
d/p/lp-1906627-02-Drop-unused-parameter-from-gssapi_spnego_ssf.patch:
- Fix GSS-SPNEGO implementation to be inter-operable with Microsoft
Active Directory, fixing the source of the recent adcli regression.
(LP: #1906627)
-- Matthew Ruffell <email address hidden> Mon, 07 Dec 2020 10:54:47 +1300
-
cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu2.2) bionic; urgency=medium
* d/p/lp-1906627-01-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch:
d/p/lp-1906627-02-Drop-unused-parameter-from-gssapi_spnego_ssf.patch:
- Fix GSS-SPNEGO implementation to be inter-operable with Microsoft
Active Directory, fixing the source of the recent adcli regression.
(LP: #1906627)
-- Matthew Ruffell <email address hidden> Mon, 07 Dec 2020 10:54:47 +1300
-
cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu2.1) bionic-security; urgency=medium
* SECURITY UPDATE: Off-by-one
- debian/patches/CVE-2019-19906.patch: fix in _sasl_add_string function
- CVE-2019-19906
* Thanks Debian for the patch provide that (Closes: #947043)
-- <email address hidden> (Leonidas S. Barbosa) Mon, 27 Jan 2020 16:25:33 -0300
-
cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu2) bionic; urgency=high
* No change rebuild against openssl1.1.
-- Dimitri John Ledkov <email address hidden> Mon, 05 Feb 2018 16:48:58 +0000
-
cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu1) artful; urgency=medium
* Merge with Debian unstable (LP: #1710684). Remaining changes:
- debian/patches/0033-Missing-definition-of-OPENSSL_zalloc.patch: Grab patch
from upstream Git to fix FTBFS with older versions of OpenSSL.
+ LP #1672941
-- Andreas Hasenack <email address hidden> Mon, 14 Aug 2017 15:11:41 -0300
